A light hearted reflection on the misconception of modern day SIEM's and how vendors have railroaded security professionals into thinking of it as a technology rather than a system of working effectively. The talk with demonstrate how often SIEM projects are overpriced and under-deliver on expectation. The price tag creates a false sense of risk mitigation, whereas it really is 'solution-signalling' where the better brand comforts the smooth of brain. Final position of the talk is to reflect on how effective security operations can be achieved faster and more effectively (both economically and risk managementy) by modelling their SIEM as a collection of services.